libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. A crafted filter program or the 'protochain' primitive used on a crafted network packet can cause the interpreter to loop infinitely.
References
Configurations
No configuration.
History
22 Oct 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Oct 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| Summary | (en) libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. A crafted filter program or the 'protochain' primitive used on a crafted network packet can cause the interpreter to loop infinitely. |
Information
Published : 2026-09-05 19:16
Updated : 2026-10-22 21:17
NVD link : CVE-2026-6554
Mitre link : CVE-2026-6554
CVE.ORG link : CVE-2026-6554
JSON object : View
Products Affected
No product.
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')